Hi there,
Just registered with this forum so I could come in personally & thank you for your post.
I had massive headache trying to work out what was going on, with my website company blaming my ISP/wifi, and my virus scans showing nothing.
THEN - along comes your post, and I've found the code (in the root directory hta file), and identified the few lines of muck that sholdn't be there and cleaaaannned it.
CHEERS!